Security Problem Modeling of Database Connection Pool

Abstract:

Connection pool is widely used in 3 tiers Web system based on database. It can improve performance of the Web system, but brings security problem to the system at the same time. The formal model of 3 tiers Web system is proposed, and the root of security problem, absence of subject transmission from Web application to database management system, is found from the model. In addition, several methods to solve the security problem faced by database connection pool in 3 tiers Web system are introduced or proposed.

• Periodical: Applied Mechanics and Materials (Volumes 543-547)
• Pages: 3276-3279
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.543-547.3276
• Online since: March 2014
• Authors: Bao Hua Huang*, Tian Jing Wang, Yan Ma, Feng Jiang
• Keywords: Connection Pool, Database, Security

References

[1] D. A. Hayes, M. Welzl, G. Armitage and M. Rossi. Improving HTTP performance using stateless, TCP: the 21st international workshop on Network and operating systems (2011), p.57.

DOI: 10.1145/1989240.1989256

[2] Information on http: /en. wikipedia. org/wiki/Connection_pool.

[3] B. Huang, T. Xie and Y. Ma. Anti SQL Injection with Statements Sequence Digest: the Spring World Congress on Engineering and Technology (2012), p.563.

DOI: 10.1109/scet.2012.6341889

[4] B. Rozenberg, Y. Gonen, E. Gudes, N. Gal-Oz and E. Shmueli. Tracking End-Users in Web Databases: the 5th International Conference on Network and System Security (2011), p.105.

DOI: 10.1109/icnss.2011.6059966

[5] B. Huang, Y. Ma and F. Jiang. Research on the Security Audit of Database Connection Pool: International Conference on Intelligent System, Applied Materials and Control Technology (2014).

[6] Information on http: /www. oracle. com/technetwork/java/javase/jdbc/index. html#corespec30.

[7] Information on http: /www. mchange. com/projects/c3p0.